Bug 301565

Summary: Libpas should set lockdown_mode_byte and hardened_byte in pas_mte_config.c
Product: WebKit Reporter: Marcus Plutowski <marcus_plutowski>
Component: bmallocAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: ggaren, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Marcus Plutowski
Reported 2025-10-28 05:29:11 PDT
Right now, there are certain code paths (privileged processes) that do not ever set the lockdown mode byte or the hardened byte. This does not have any effect at present because both of these bytes are only ever used *within* WebContent to up the hardening level, but it’s confusing / bug prone in the case that someone adds some condition that checks for those bytes elsewhere in the code.
Attachments
Marcus Plutowski
Comment 1 2025-10-28 05:33:53 PDT
Marcus Plutowski
Comment 2 2025-10-28 05:34:16 PDT
EWS
Comment 3 2025-11-07 12:31:20 PST
Committed 302741@main (051e1cb9aeab): <https://commits.webkit.org/302741@main> Reviewed commits have been landed. Closing PR #53080 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.